Ads, Trackers, Security & UX Review
6 public pages rendered. The score, signal cards, and evidence tables below show what appeared in the browser sample.
Status
Scan completed
Host
commonlit.org
Confidence
72/100
Observed safety score
Signal mix
Weak2
Ad domains
38
Tracker domains
72/100
Confidence
commonlit.org
Education and student tools
CLOUDFLARENET - Cloudflare, Inc., US
104.20.31.226; AS13335
Enabled
Google Trust Services
472
39 third-party domains observed
Four quick signals first. Evidence stays grouped by risk area.
Tracking signals
Header gaps
Ad pressure
Low friction
Meaning
The rendered scan observed 38 tracker-domain matches, led by cdn.prod.website-files.com (41), fonts.gstatic.com (35), cdn.jsdelivr.net (12) and 35 more, and up to 21 cookies across the sampled public pages.
Evidence
Meaning
Security posture is based on observed TLS, response headers, mixed-content behavior, and usable external-check output.
Evidence
Meaning
The rendered scan observed 2 ad-domain matches across 6 sampled public pages, led by googleads.g.doubleclick.net (4), ad.doubleclick.net (1).
Evidence
Meaning
The rendered public-page sample loaded with HTTP 200 and 13959 visible text characters.
Evidence
Key signals first, with important limits kept close so the report stays useful without overstating certainty.
Captured evidence
Pages sampled
Rendered browser pass
Requests
39 third-party - 2 ad - 38 tracker
Cookies
13 third-party
Security posture
HSTS yes - CSP no - X-Frame no
Request volume
472 vs 628 median
Evidence
Third-party domain count was above the same-cluster...
Evidence
Tracker-domain count was above the same-cluster med...
Scan boundary
School context
Policy, consent, paid features
Ad context
Location, consent, A/B tests
External checks
Safe Browsing
Google Transparency Report Safe Browsing status returned no threat matches for 1 URL
HTTP Observatory
MDN HTTP Observatory returned grade F with score 0 and 5 failed checks
Observed domains are grouped by company or tool, purpose, request volume, and the sampled pages where they appeared.
24
Entities
Companies or tools grouped from observed domains.
7
Categories
Most active: Tracking and measurement.
198
Requests
Classified ad or tracker requests in the sample.
4/6
Pages seen
Sampled pages with at least one classified signal.
Tracking and measurement
18 entities / 31 domains
Social tracking
1 entity / 2 domains
Performance monitoring
1 entity / 2 domains
Advertising
1 entity / 2 domains
Analytics
1 entity / 1 domain
Customer messaging
1 entity / 1 domain
Tracking and measurement
57
requests
3/6
pages
Website Files
Tracking and measurement
41
requests
2/6
pages
Intellimize
Tracking and measurement
13
requests
2/6
pages
Jsdelivr
Tracking and measurement
12
requests
2/6
pages
Social tracking
12
requests
2/6
pages
Amazon.com
Tracking and measurement
7
requests
2/6
pages
Raw domains and request paths classified as ad-network matches in rendered samples.
2
domains
5
classified requests
2
pages with matches
googleads.g.doubleclick.net
Matched known ad-network patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Matched hosts
Domain matched known ad-network patterns.
ad.doubleclick.net
Matched known ad-network patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch.
Seen in sample
Request types
Matched hosts
Domain matched known ad-network patterns.
Raw domains and request paths classified as tracker matches in rendered samples.
38
domains
193
classified requests
4
pages with matches
cdn.prod.website-files.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: stylesheet, image, script, font, xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
fonts.gstatic.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: font.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
cdn.jsdelivr.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script, stylesheet.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
google.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch, image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
px.ads.linkedin.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: xhr, image, fetch.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
log.intellimize.co
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: ping.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
api.intellimize.co
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
fonts.googleapis.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 3 rendered pages. Request types: stylesheet.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
api.instatus.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: fetch.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
googleads.g.doubleclick.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
o342790.ingest.sentry.io
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: fetch. Classified owner: Functional Software. Tracker owner: Functional Software.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Functional Software.
snap.licdn.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
static.cloudflareinsights.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 4 rendered pages. Request types: script. Classified owner: Cloudflare. Tracker owner: Cloudflare.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Cloudflare.
beacon-v2.helpscout.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.sentry-cdn.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script, other. Classified owner: Functional Software. Tracker owner: Functional Software.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Functional Software.
unpkg.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
117984488.intellimizeio.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: document.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
ajax.googleapis.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
alb.reddit.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
api.hubapi.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
cdn.intellimize.co
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
cdnjs.cloudflare.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script. Classified owner: Cloudflare. Tracker owner: Cloudflare.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Cloudflare.
d3e54v103j8qbb.cloudfront.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
d3eto7onm69fcz.cloudfront.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: stylesheet, script. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
googletagmanager.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-analytics.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-banner.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hs-scripts.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hsadspixel.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
js.hsforms.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
linkedin.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
pixel-config.reddit.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: xhr.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
redditstatic.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: script.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
track.hubspot.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 2 rendered pages. Request types: image.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
ad.doubleclick.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: fetch.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker patterns.
d33v4339jhl8k0.cloudfront.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: image. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
d3hb14vkzrxvla.cloudfront.net
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: xhr. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
s3.amazonaws.com
Matched DuckDuckGo Tracker Radar tracker patterns during the rendered public-page sample. Observed on 1 rendered page. Request types: stylesheet. Classified owner: Amazon.com. Tracker owner: Amazon.com.
Seen in sample
Request types
Context
Matched hosts
Domain matched DuckDuckGo Tracker Radar tracker data for Amazon.com.
These options are category-relevant comparison leads for CommonLit. Each card separates why it is comparable and when it fits.
Gimkit
gimkit.com
Why compare it
Gimkit is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Blooket
blooket.com
Why compare it
Blooket is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
ClassLink
classlink.com
Why compare it
ClassLink is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Zearn
zearn.org
Why compare it
Zearn is in the education and student tools category and has rendered scan evidence, making it useful for comparing ads, trackers, cookies, and security posture.
Best fit
Use it as a comparison point when you want another option with lower observed risk in the same evidence categories.
Scan-backed comparison
Latest scan of CommonLit across 6 public pages captured 472 browser requests, 39 third-party domains, 2 ad-domain matches, 38 tracker-domain matches, and 21 cookies (13 third-party). Header gaps: CSP, X-Frame-Options. External checks: Safe Browsing clear; HTTP Observatory flagged. This is not a guarantee of safety; it is a time-bound public-page evidence report.
Key observations from the rendered sample: 472 browser requests, 39 third-party domains, 2 ad-domain matches, 38 tracker-domain matches, and 13 third-party cookies. Header gaps: CSP, X-Frame-Options.
The rendered public-page scan found 2 ad-domain matches and 38 tracker-domain matches across 6 sampled pages. The most active matches were cdn.prod.website-files.com (41), fonts.gstatic.com (35), cdn.jsdelivr.net (12) and 35 more.
Use the public-page privacy and security signals here, then compare student-data terms, SSO settings, roster access, retention policy, parent consent, and district controls.
We tested commonlit.org because it is the website address selected for this report.
Compare the same evidence categories: rendered requests, ad-domain matches, tracker-domain matches, cookies, security headers, external checks, and whether each alternative fits the same user task.
No. Blockify can reduce ads, trackers, and pop-ups in the browser, but no scan can guarantee every page, account flow, future visit, or personalized state is safe.
